How to Report and Recover a Hacked Instagram Account

If someone may have accessed your Instagram account, start with Instagram's own recovery tools. The right next step depends on whether you can still sign in, whether your contact details were changed, and which identity checks Instagram offers for your account. There is no reliable shortcut that guarantees access. This guide gives you a clear route through those decisions without asking you to share your password or recovery codes with anyone.

Start at Instagram's official recovery page

Open instagram.com/hacked by typing the address into your browser, or use the recovery choices offered in the Instagram app. Meta introduced this page for account-access problems and continues to link to its hacked-account guidance from its Safety Center. Choose the option that describes what happened to your account, then follow the prompts you actually see.

The choices can differ. Someone who still has a working session may be able to change security settings. Someone who has been signed out may need to verify ownership first. Do not assume that an old screenshot of the app matches your current screen, and do not enter a code into a page reached through an unsolicited message.

Before proceeding, check that you are on Instagram's official app or domain. A person who promises to recover an account in exchange for your password, a login code, or payment is not part of the process described here. This article cannot submit a recovery request for you or see the status of one.

If you can still sign in, protect the account now

Change the password and review contact details

Set a new password that you do not use for another account. Meta's account-security guidance recommends unique passwords and says to keep login details private. Then check the email address and phone number connected to Instagram. If either was changed without your permission, correct it through the account settings if you still have access.

Protect the email account linked to Instagram as well. If someone can read that inbox, they may be able to receive account-related messages. If you no longer control the email address or phone number, Meta's Instagram Help Center says to try to regain access through the email or phone provider. Instagram cannot restore access to your email inbox for you.

Review sessions and turn on extra protection

Find the account's login activity or “Where you're logged in” area and review the devices shown. Sign out of sessions you do not recognize, while keeping in mind that a location label alone is not proof of another person. Meta's Safety Center describes session review, login alerts, and two-factor authentication. Enable two-factor authentication through Instagram's current security settings and save any recovery method in a place only you control.

Changing a password and ending sessions are protective steps; neither proves what caused the access problem. If you see content, messages, or profile details you did not create, record what you find before you remove it if you need to explain the incident later. Avoid posting a password or recovery code as part of that record.

If you cannot sign in, use the account-access flow

Return to Instagram's hacked-account page and select the option that fits your case. Enter the account identifier requested by Instagram and use a contact method you can access. Follow the available login-link, code, or identity prompts. The exact prompts depend on the account and the information Instagram can use to check ownership.

Do not interpret a missing option as a reason to use a third-party “recovery agent.” Instead, check whether you selected the correct account, whether you still control the registered email or phone, and whether the official flow offers another verification route. If you are able to restore a working session, complete the security review in the previous section rather than stopping after the first successful sign-in.

If your email address or phone number changed

A changed contact method can keep you from receiving a login link. Review account-security messages in the email inbox that was previously connected to Instagram, but verify the destination before following a link. Use the official recovery page directly if you are uncertain about a message.

If you have lost access to the mailbox or number itself, start with the relevant provider. Meta's lost-contact guidance explains that regaining access to the original email or number can be necessary and that Instagram cannot recover the email inbox. Do not claim that a changed address can always be reversed or that any particular recovery window is guaranteed.

If Instagram asks you to confirm your identity

The official flow may request additional information. For an Instagram account with photos of the account holder, Meta says it may request a video selfie to help confirm identity. That method is conditional: it is not offered to every account, and submitting it does not guarantee approval. Follow the instructions shown in the Instagram app and use the secure contact address you supplied during recovery.

If a check fails, follow any retry or alternative instructions Instagram provides. The article cannot predict whether a particular account will pass a review, how long every case will take, or whether a person will be offered a direct support conversation.

After you regain access, check what changed

Review the profile name, contact details, connected accounts, recent posts, and messages. Check security settings and signed-in devices again. Remove access you do not recognize, then make sure your new password and two-factor method are under your control. Meta's Safety Center is the reference for password, login-alert, two-factor, and session controls.

If messages were sent from your account without your knowledge, consider warning the recipients through a trusted channel. Explain that the message may not have come from you, especially if it requested a link click, code, or payment. This is practical safety advice, not a promise that Instagram will remove those messages or undo any effects.

Keep an eye on subsequent login alerts and contact-detail changes. If access is lost again, return to the official recovery flow and review the security of the email account tied to Instagram. Avoid repeatedly sharing recovery codes with anyone claiming to be support.

Common questions about a hacked Instagram account

Can I report the problem if I am locked out?

Yes. The purpose of instagram.com/hacked is to guide account-access problems, including suspected compromise. You should use the options presented for your own account. The ability to submit information is not a guarantee that access will be restored.

Will Instagram always ask for a video selfie?

No. Meta says a video selfie may be requested for some accounts with photos of the account holder. Other accounts or situations may have different steps. Follow the current prompts instead of assuming that one verification method will be available.

Can this website recover my Instagram account for me?

No. Only use Instagram's official account-access flow for an Instagram recovery request. Do not send your password, login code, recovery code, or private identity material to this site or to a person who contacts you about this guide.